IIS Audit needs to check SCHANNEL registry values for alternate Enabled value of 0xffffffff about audit-test-automation HOT 3 CLOSED

# 7.11
function Test-IISAES256Enabled {
	<#
	.Synopsis
		Ensure AES 256/256 Cipher Suite is enabled
	.Description
		AES 256/256 is the most recent and mature cipher suite for protecting the confidentiality and integrity of HTTP traffic. Enabling AES 256/256 is recommended. This is enabled by default on Server 2012 and 2012 R2.
	#>

	$message = "AES 256/256 Cipher is disabled"
	$audit = "False"

	$path = "HKLM:\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\AES 256/256\"

	if (Test-Path $path) {
		$Key = Get-Item $path
		if ($null -ne $Key.GetValue("Enabled", $null)) {
			$value = Get-ItemProperty $path | Select-Object -ExpandProperty "Enabled"
			if ($value -eq 1) {
				$message = $MESSAGE_ALLGOOD
				$audit = "True"
			}
		}
	}